Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
  1. Forside
  2. Ikke-kategoriseret
  3. I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward.

I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward.

Planlagt Fastgjort Låst Flyttet Ikke-kategoriseret
149 Indlæg 62 Posters 0 Visninger
  • Ældste til nyeste
  • Nyeste til ældste
  • Most Votes
Svar
  • Svar som emne
Login for at svare
Denne tråd er blevet slettet. Kun brugere med emne behandlings privilegier kan se den.
  • mttaggart@infosec.exchangeM mttaggart@infosec.exchange

    I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward. Every corpo service is eventually going to make you ashamed to use it.

    lritter@mastodon.gamedev.placeL This user is from outside of this forum
    lritter@mastodon.gamedev.placeL This user is from outside of this forum
    lritter@mastodon.gamedev.place
    wrote sidst redigeret af
    #47

    @mttaggart greedy bastards as far as the eye can see.

    yeah your idea sounds like it would fit well into how things are already going. herd mentality is our doom.

    1 Reply Last reply
    0
    • philcowans@universeodon.comP philcowans@universeodon.com

      @ireneista @mttaggart @vfrmedia - so I think my take on this is more community first, tech second. Like, if the output is basically a support network and a set of tools to help individuals and community organisations self host, then I think I'd be quite happy with that.

      Or maybe the solution is lower level services, e.g. shared server management with tools to make it easy for individual users to spin up their own Mastodon instance on their own domain.

      VPNs are possibly a bit of a special case, and maybe the DEFCON folks reached the right conclusion there when they decided just to support Tor.

      ireneista@adhd.irenes.spaceI This user is from outside of this forum
      ireneista@adhd.irenes.spaceI This user is from outside of this forum
      ireneista@adhd.irenes.space
      wrote sidst redigeret af
      #48

      @philcowans @mttaggart @vfrmedia that's where we're at, as well

      we went and read the linked thread, it does agree with our own conclusions both for generic infra and for VPNs

      ireneista@adhd.irenes.spaceI 1 Reply Last reply
      0
      • ireneista@adhd.irenes.spaceI ireneista@adhd.irenes.space

        @philcowans @mttaggart @vfrmedia that's where we're at, as well

        we went and read the linked thread, it does agree with our own conclusions both for generic infra and for VPNs

        ireneista@adhd.irenes.spaceI This user is from outside of this forum
        ireneista@adhd.irenes.spaceI This user is from outside of this forum
        ireneista@adhd.irenes.space
        wrote sidst redigeret af
        #49

        @philcowans @mttaggart @vfrmedia but yes, your goals around community seem like the right ones to us, we just don't know how to do useful things with that

        1 Reply Last reply
        0
        • philcowans@universeodon.comP philcowans@universeodon.com

          @ireneista @mttaggart @vfrmedia - btw, there's this:

          https://www.merri-bek.tech/

          Which I think is the closest I've found. I also feel that https://toot.wales/ and https://join.cosocial.ca/ are somewhat similar in scope.

          Tech-wise, there's https://coopcloud.tech/ - @coopcloud.

          vfrmedia@social.tchncs.deV This user is from outside of this forum
          vfrmedia@social.tchncs.deV This user is from outside of this forum
          vfrmedia@social.tchncs.de
          wrote sidst redigeret af
          #50

          @philcowans @ireneista @mttaggart @coopcloud

          things like that are definitely feasible, provided you set expectations to all users they aren't going to protect you from the NCA, so don't do anything on those networks that would attract them! (to be fair not /that/ difficult to do if folk are sensible)

          1 Reply Last reply
          0
          • mttaggart@infosec.exchangeM mttaggart@infosec.exchange

            @philcowans @ireneista @vfrmedia Yeah my thinking was more shared infra and the ability to spin up services for oneself. But I also agree that this is something akin to the size of old key-sharing parties. It doesn't scale—intentionally.

            ireneista@adhd.irenes.spaceI This user is from outside of this forum
            ireneista@adhd.irenes.spaceI This user is from outside of this forum
            ireneista@adhd.irenes.space
            wrote sidst redigeret af
            #51

            @mttaggart @philcowans @vfrmedia it's not scale that we're concerned about. scale is not the blocker we are identifying.

            mttaggart@infosec.exchangeM 1 Reply Last reply
            0
            • mttaggart@infosec.exchangeM mttaggart@infosec.exchange

              I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward. Every corpo service is eventually going to make you ashamed to use it.

              drwho@masto.hackers.townD This user is from outside of this forum
              drwho@masto.hackers.townD This user is from outside of this forum
              drwho@masto.hackers.town
              wrote sidst redigeret af
              #52

              @mttaggart Agreed.

              1 Reply Last reply
              0
              • mttaggart@infosec.exchangeM mttaggart@infosec.exchange

                I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward. Every corpo service is eventually going to make you ashamed to use it.

                falk_@chaos.socialF This user is from outside of this forum
                falk_@chaos.socialF This user is from outside of this forum
                falk_@chaos.social
                wrote sidst redigeret af
                #53

                @mttaggart I‘ve been pondering hosting coops as well, but there’s always the bus factor and what members want to spend money-wise for other people hosting their stuff.

                You‘d have to pay rent for a datacenter, a bunch of used servers and some volunteers / part-time employees that take care of sysadmin things.

                „trust other people’s homelab“ is not something I‘d do personally. People‘s lives change, and they might not be able to support this indefinitely.

                mttaggart@infosec.exchangeM 1 Reply Last reply
                0
                • mttaggart@infosec.exchangeM This user is from outside of this forum
                  mttaggart@infosec.exchangeM This user is from outside of this forum
                  mttaggart@infosec.exchange
                  wrote sidst redigeret af
                  #54

                  @decay That's why you need literal buy-in, yep.

                  1 Reply Last reply
                  0
                  • falk_@chaos.socialF falk_@chaos.social

                    @mttaggart I‘ve been pondering hosting coops as well, but there’s always the bus factor and what members want to spend money-wise for other people hosting their stuff.

                    You‘d have to pay rent for a datacenter, a bunch of used servers and some volunteers / part-time employees that take care of sysadmin things.

                    „trust other people’s homelab“ is not something I‘d do personally. People‘s lives change, and they might not be able to support this indefinitely.

                    mttaggart@infosec.exchangeM This user is from outside of this forum
                    mttaggart@infosec.exchangeM This user is from outside of this forum
                    mttaggart@infosec.exchange
                    wrote sidst redigeret af
                    #55

                    @falk_ That's true, but indefinite support may be an unreasonable expectation. A reasonable expectation may be an exit agreement.

                    falk_@chaos.socialF wolf480pl@mstdn.ioW 2 Replies Last reply
                    0
                    • mttaggart@infosec.exchangeM mttaggart@infosec.exchange

                      I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward. Every corpo service is eventually going to make you ashamed to use it.

                      delta_vee@cosocial.caD This user is from outside of this forum
                      delta_vee@cosocial.caD This user is from outside of this forum
                      delta_vee@cosocial.ca
                      wrote sidst redigeret af
                      #56

                      @mttaggart I would love to see more of that, but there's a minimum size in practical terms, I think -- you have to be able to offer the equivalent of multiple AWS AZs, multiple long-term-stable exclusive IPv4 addresses, a properly HA DNS stack, etc

                      mttaggart@infosec.exchangeM 1 Reply Last reply
                      0
                      • delta_vee@cosocial.caD delta_vee@cosocial.ca

                        @mttaggart I would love to see more of that, but there's a minimum size in practical terms, I think -- you have to be able to offer the equivalent of multiple AWS AZs, multiple long-term-stable exclusive IPv4 addresses, a properly HA DNS stack, etc

                        mttaggart@infosec.exchangeM This user is from outside of this forum
                        mttaggart@infosec.exchangeM This user is from outside of this forum
                        mttaggart@infosec.exchange
                        wrote sidst redigeret af
                        #57

                        @delta_vee I don't think that's correct at all. You can be much smaller than that, at least to start.

                        delta_vee@cosocial.caD 1 Reply Last reply
                        0
                        • mttaggart@infosec.exchangeM mttaggart@infosec.exchange

                          I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward. Every corpo service is eventually going to make you ashamed to use it.

                          khleedril@cyberplace.socialK This user is from outside of this forum
                          khleedril@cyberplace.socialK This user is from outside of this forum
                          khleedril@cyberplace.social
                          wrote sidst redigeret af
                          #58

                          @mttaggart I think it would have to follow the pirate radio model: anchor a ship in international waters, tap into subsea cables, 'adopt' some IP addresses, provide a top-level DNS server, ...

                          drwho@masto.hackers.townD 1 Reply Last reply
                          0
                          • mttaggart@infosec.exchangeM mttaggart@infosec.exchange

                            I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward. Every corpo service is eventually going to make you ashamed to use it.

                            jumpingjackrussell@mstdn.socialJ This user is from outside of this forum
                            jumpingjackrussell@mstdn.socialJ This user is from outside of this forum
                            jumpingjackrussell@mstdn.social
                            wrote sidst redigeret af
                            #59

                            @mttaggart

                            But then there’s the small problem of the global means of transmission (satcoms and telecoms).

                            Need redundant, independent amateur radio-like terrestrial data repeater stations.

                            mttaggart@infosec.exchangeM 1 Reply Last reply
                            0
                            • ithoughtisawa2@infosec.exchangeI ithoughtisawa2@infosec.exchange

                              @brahms @mttaggart you can do more than you think with old desktop hardware and 16 gigs of DDR4 RAM. It is also much more energy efficient than server hardware (and much quieter too)

                              dbrand666@mastodon.socialD This user is from outside of this forum
                              dbrand666@mastodon.socialD This user is from outside of this forum
                              dbrand666@mastodon.social
                              wrote sidst redigeret af
                              #60

                              @ithoughtisawa2
                              An old desktop is a great place to start but if you're buying, don't rule out old servers. They're much better at thermal management very important if you're gonna stuff a few drives into it.

                              They're surprisingly power efficient. And many of them are whisper quiet with the right config.

                              I'm running an old Dell T430 and all I hear is the hard drives. It's pulling about 70w with 6 hard drives in it (plus an SSD).

                              No GPU though.
                              @brahms @mttaggart

                              1 Reply Last reply
                              0
                              • mttaggart@infosec.exchangeM mttaggart@infosec.exchange

                                I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward. Every corpo service is eventually going to make you ashamed to use it.

                                philip@social.simplexity.questP This user is from outside of this forum
                                philip@social.simplexity.questP This user is from outside of this forum
                                philip@social.simplexity.quest
                                wrote sidst redigeret af
                                #61

                                @mttaggart any examples?

                                1 Reply Last reply
                                0
                                • mttaggart@infosec.exchangeM mttaggart@infosec.exchange

                                  I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward. Every corpo service is eventually going to make you ashamed to use it.

                                  rlonstein@social.stonetools.techR This user is from outside of this forum
                                  rlonstein@social.stonetools.techR This user is from outside of this forum
                                  rlonstein@social.stonetools.tech
                                  wrote sidst redigeret af
                                  #62

                                  @mttaggart A throwback to the 1990's/early 00's when you'd share a box running FreeBSD or Solaris colo-ed where we knew somebody and kick in what amounted to beer money.

                                  drwho@masto.hackers.townD 1 Reply Last reply
                                  0
                                  • jumpingjackrussell@mstdn.socialJ jumpingjackrussell@mstdn.social

                                    @mttaggart

                                    But then there’s the small problem of the global means of transmission (satcoms and telecoms).

                                    Need redundant, independent amateur radio-like terrestrial data repeater stations.

                                    mttaggart@infosec.exchangeM This user is from outside of this forum
                                    mttaggart@infosec.exchangeM This user is from outside of this forum
                                    mttaggart@infosec.exchange
                                    wrote sidst redigeret af
                                    #63

                                    @jumpingjackrussell Don't try to solve every problem at once.

                                    drwho@masto.hackers.townD 1 Reply Last reply
                                    0
                                    • mttaggart@infosec.exchangeM mttaggart@infosec.exchange

                                      @falk_ That's true, but indefinite support may be an unreasonable expectation. A reasonable expectation may be an exit agreement.

                                      falk_@chaos.socialF This user is from outside of this forum
                                      falk_@chaos.socialF This user is from outside of this forum
                                      falk_@chaos.social
                                      wrote sidst redigeret af
                                      #64

                                      @mttaggart Yes, you need some easy migration for the not so technically inclined. Because those are the ones that would use those services.

                                      And you‘d need to standardize on absent of services to make migration viable. And of course you have to be at least as good as the „free“ services, so that a large number of people would use those services.

                                      I‘m all for self-hosting but not everyone has the time or ability to run their own services. Just running your own mail service is complex enough.

                                      1 Reply Last reply
                                      0
                                      • vfrmedia@social.tchncs.deV vfrmedia@social.tchncs.de

                                        @philcowans @mttaggart @ireneista

                                        I think the dilemma is accountability/liability - what happens when one of your users does something that results in cops/feds demanding user data (or even seizing an entire server?)

                                        Here in England it seems possible to get nicked for harmless protests and now there's the paranoia about "keeping kids safe"

                                        How many people with a good career and salary in tech are going to risk it for the sake of someone /elses/ freedom, if they aren't making money from the venture?

                                        This could maybe limit involvement to folk who are retired with good savings and less to lose (its already happening with the demographics of protesters)

                                        (that goes for all the current VPN and hosting companies too and is their Achilles Heel).

                                        onepict@chaos.socialO This user is from outside of this forum
                                        onepict@chaos.socialO This user is from outside of this forum
                                        onepict@chaos.social
                                        wrote sidst redigeret af
                                        #65

                                        @vfrmedia @philcowans @mttaggart @ireneista Yeah there's UK #indymedia folks who remember the time the police seized their server.

                                        https://wiki.indymedia.org.uk/wiki/Bristol_IMC_Court_Order

                                        vfrmedia@social.tchncs.deV 1 Reply Last reply
                                        0
                                        • ireneista@adhd.irenes.spaceI ireneista@adhd.irenes.space

                                          @mttaggart @vfrmedia @philcowans so just to get a little more pointed about it

                                          when that happens, if you're operating as a corporation there are only three options:

                                          1. tell the marginalized people bye, can't help you
                                          2. attempt to defend them on the legal front
                                          3. shut down

                                          corporations exist at the pleasure of the state. there is no fourth choice.

                                          nyanpasu64@donotsta.reN This user is from outside of this forum
                                          nyanpasu64@donotsta.reN This user is from outside of this forum
                                          nyanpasu64@donotsta.re
                                          wrote sidst redigeret af
                                          #66
                                          @ireneista @mttaggart @vfrmedia @philcowans not an expert but my thought is that "community hosting" (my thoughts are the neocities codeberg git.gay space) would need to coordinate with bulletproof hardened shit, and spaces subject to legal/copyright takedowns (bypass paywall extension on Russian git hosting, self-hosted Switch emulator forks) are an example of this spectrum

                                          i did feel a lot of Nintendo fan projects were developed too openly with not enough opsec and bulletproof hosting, like they had no plans to keep Nintendo from finding the project, sending the C&D like countless times before, and finding their home address

                                          i did wonder how homebrew estrogen managed to be hosted on the clearnet for so long

                                          it *is* sad how most of the game piracy and libgen/scihub mirrors are scammy or CAPTCHA hell
                                          1 Reply Last reply
                                          0
                                          Svar
                                          • Svar som emne
                                          Login for at svare
                                          • Ældste til nyeste
                                          • Nyeste til ældste
                                          • Most Votes


                                          • Log ind

                                          • Har du ikke en konto? Tilmeld

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          Graciously hosted by data.coop
                                          • First post
                                            Last post
                                          0
                                          • Hjem
                                          • Seneste
                                          • Etiketter
                                          • Populære
                                          • Verden
                                          • Bruger
                                          • Grupper